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Given stabilizer operations and the ability to repeatedly prepare a single-qubit mixed state p, 
can we do universal quantum computation? As motivation for this question, "magic state" distilla- 
tion procedures can reduce the general fault-tolerance problem to that of performing fault-tolerant 
stabilizer circuits. 

We improve the procedures of Bravyi and Kitaev in the Hadamard "magic" direction of the Bloch 
sphere to achieve a sharp threshold between those p allowing universal quantum computation, and 
those for which any calculation can be efficiently classically simulated. As a corollary, the ability to 
repeatedly prepare any pure state which is not a stabilizer state (e.g., any single-qubit pure state 
which is not a Pauli eigenstate), together with stabilizer operations, gives quantum universality. It 
remains open whether there is also a tight separation in the so-called T direction. 



I. INTRODUCTION 

In "magic states distillation," introduced by Bravyi 
and Kitaev in Q], we try to achieve universal quantum 
computation using only Clifford group unitaries, prepa- 
ration and measurement in the computational basis |0), 
|1), and the ability to prepare a given single-qubit mixed 
state p. 

If p, considered as a point in the Bloch sphere of Fig. ^ 
lies within O the octahedral closed convex hull of the six 
eigenvectors of the Pauli operators X, Y and Z, then 
the calculation is classically simulable by the Gottesman- 
Knill theorem. Bravyi and Kitaev show universality if p 
is one of certain pure states: either Hadamard eigen- 
states (midway between X and Z eigenstates on the 
Bloch sphere) and symmetrical states under the sym- 
metries of the octahedron O (i.e. radially out from the 
midpoints of the edges of O), or states symmetrical to T 
eigenstates (radially out from the centers of the faces of 
O). Here the operator T conjugates the Pauli operators 
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FIG. 1: The Bloch sphere, the octahedron O, and the magic 
states \H) and \T). 
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a,s X ^ Y ^ Z ^ X, a 27r/3 rotation (order 3) on the 
Bloch sphere. (Prior to Q, Q| had shown universality 
with the Hadamard eigenstate, and see Q.) 

Bravyi and Kitaev show that the restricted set of op- 
erations can be used to purify p in the H and T "magic" 
directions. Here is a summary of their results in the T 
direction. By randomly applying the T gate, we may 
assume that p is a mixture of the e 2wi / 3 and e - 2rri / 3 
eigenstates with probabilities 1 — p and p, respectively. 
Bravyi and Kitaev give a method, based on decoding 
a well-known 5-qubit code, for taking five copies of p 
with error p < i(l — ^/3/7), and (with some probabil- 
ity) producing a mixture in the T direction with smaller 

crror i+5p+lF+t5 ■ where t = Recursively applying 
the method allows the reduction of p exponentially fast 
in n the number of prepared copies of p (p ut(n,p) ~ 
(5p) nl OS230 ). Geometrically, in the Bloch sphere, the 
threshold condition is that p lies beyond a plane parallel 
to a face of O at distance \/3/7 ~ 0.655 from the origin. 
It is an interesting open question whether universal quan- 
tum computation is possible for states p between this 
plane and the face of O (which is distance 1/V3 f=a 0.577 
from the origin, or p = |(1 — l/\/3)). In terms of the 
parameter p, is there a tight separation between those 
mixed states allowing only classically-simulable compu- 
tation and those allowing universal quantum computa- 
tion? 

The H direction bisects an edge of the octahedron O. 
Again, we may assume that p is a mixture of the +1 and 
— 1 eigenstates of the Hadamard gate H . with probabil- 
ities 1 — p and p. Bravyi and Kitaev give a particular 
15-qubit code. They take 15 copies of p, and apply the 
decoding circuit for their code. They reject if any errors 
are detected. After one successful iteration, the output 
crror is 

1 - 15(1 - 2p) 7 + 15(1 - 2pf - (1 - 2p) 15 
Pout ~ 2(1 + 15(1 - 2p) 8 ) ' 

giving an error threshold of about 14.148% below which 
H eigenstates can be distilled. Interestingly, Knill Q 
had earlier independently shown an apparently quite dif- 
ferent method which however achieves the exact same 
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Pout- Knill's method is based on using fourteen copies of 
p to apply a faulty logical controlled-Hadamard to the 7- 
bit Steane/Hamming code. We analyzed Knill's method 
and found that starting with the 7 bits in an encoding of 
a fifteenth copy of p gave the best results - surprisingly, 
in fact this distillation method is exactly equivalent to 
Bravyi and Kitaev's method (in terms of output error 
in terms of p; the acceptance probability is actually 2 14 
times smaller). 

In this paper, we will show that in fact the separa- 
tion between classical simulability and universal quantum 
computation is tight in the H direction. 

Theorem 1. Let Ft (p) be the maximum fidelity between 
p and an H-type magic state, i.e. 



F T {p) = msKy/(H\mpU\H) , 

where U ranges over the symmetries of the octahedron O. 
Preparation of p together with Clifford group operations 
and Pauli eigenstate preparation and measurement allows 
universal quantum computation whenever 



F T (p) > F* H 



def 



1 + 



0.924 



We show that decoding either the Steane 7-qubit code 
or the Golay 23-qubit code gives the result. Other CSS 
codes might also work, as we'll discuss in Appendix ^ 
Fig. [21 shows the improvement in the threshold on p for 
.ff-type distillation using our new procedure. As an im- 
mediate consequence of this theorem, we obtain: 

Corollary 1. Preparation of any single-qubit pure state 
excepting the six Pauli eigenstates, together with Clifford 
group operations and Pauli eigenstate preparation and 
measurement, allows universal quantum computation. 

(Compare to the universality results of 0-) 
In Appendix [5] wc show that any multi-qubit pure 
state which is not a stabilizer state can be reduced to 
a single-qubit pure state which is not a Pauli eigenstate 
using Clifford group operations and postselected Pauli 
measurements, proving: 

Corollary 2. Preparation of any pure state which is not 
a stabilizer state, together with Clifford group operations 
and Pauli eigenstate preparation and measurement, al- 
lows universal quantum computation. 

Besides the theoretical interest of the magic states dis- 
tillation problem, there is a more practical interest. This 
is how Knill came upon the same problem. In error- 
correction threshold schemes, Clifford group operations 
are typically easiest to analyze and simulate because they 
take Pauli product errors to other Pauli product errors. 
However, analyzing only Clifford group operations will 
not give a threshold for universal quantum computation. 
Knill's solution is to prepare an encoded Bell pair, de- 
code one half of it (throwing away the entire pair if any 




FIG. 2: Looking down on one quadrant of the Bloch sphere. 
Fhe small empty and filled circles respectively indicate T- 
type and H-type magic states. Fhe dotted blue projected 
circles give the intersections with the unit sphere of the planes 
beyond which T distillation is possible. Fhe dashed green 
circles similarly show the limits of Bravyi and Kitaev's H 
distillation procedure, and the red circles the limits of our new 
H distillation procedure. Examining the origin at lower left, 
one sees that all pure states excepting the Pauli eigenstates 
can be distilled to \H). 



errors are detected), then teleport a single bit state p 
into the encoding. If the errors in p, the Bell pair, and 
the Bell measurement used for teleportation are small 
enough, then the encoded p can be distilled to a magic 
state. Our improved distillation procedure does not in- 
crease Knill's threshold in ja], however, because this step 
is not the bottleneck. A related problem is determining 
the power of error-prone gate sets 0, • 

We give two proofs of Theorem ^ In Sections ITT1 
and 11111 we show the thresholds for the [[7, 1,3]] Steane 
code and the [[23, 1, 7]] Golay code. 



II. STEANE [[7, 1,3]] CODE 

In this distillation procedure, we take seven copies of 

Poo Pox = Pw 
Pw Pu = 1 - Poo 

and decode the Steane [[7, 1, 3]] code, rejecting and start- 
ing over if any errors are detected. The 7-bit Steane code 
has stabilizer generators 

IIIXXXX, IXXIIXX, XIX IX IX, 
IIIZZZZ, IZZIIZZ, ZIZIZIZ , 

and its logical X and logical Z operations are simply 
transverse X and Z, respectively. Let S be the set of 
even-weight codewords to the classical 7-bit Hamming 
code: 



S = 



7 , 0001111, 0110011, 0111100, 1010101, 
1011010,1100110,1101001 



3 



Then the ±1 logical Z cigenstates \0l), are given by 



Then use 



V8|0 L ) = |oj°>) + |0i 4) ) 
V8|l L )^|li 7) ) + |li 3) > , 



when 1 10 



(0)\ 



|o 7 ), |oi 4) > = £ Q 



es-o 



and II 



(7)\ 



(The super- 



X^QiO)^ |1 (3) ) 

script gives the weight of the classical codewords summed 
over.) 

We compute 
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<0 7 |^ 7 |0 7 )+25R(0 7 |p w |0^ 4) ) 



-(oi 4 V 07 |oi 4) ) 



(0l|^ 7 |0 l ) 

= |(pgo + 2 • -mpgopgi + <o£ 4) |p® 7 |oi 4 >» 
where we have applied that (0 7 \p® 7 = (poo <0| +p i (1 1)®' 



aeS-0 



\a\p® 7 \a) 



E H^ 7 i fc > 



a,h€S-0 



= 7PoqPii + 7 ■SploPmPioPli- 

The first term is because each element of S — 7 has 
Hamming weight 4. The second term is because any two 
distinct elements of S — 7 share a in one position, share 
l's in two positions, and differ (one being 0, the other 1) 
in four positions. Substitute back in to get 

<OL^ 7 |0 L ) = i(p 7 + 7^ ( p 4 i+/9 4 o) 

+ IpooPn + 7 ■ 6poo|poi| 4 Pii) ■ 

We can then use that the terms of arc simply the 
bitwise complements of terms of |0l) to obtain 



(1l\p® 7 \Il) = §(/4+7pii(Poi+Pio) + 7PooPri + 7- 6/&|poi| 4 Pii) 
(0l|p® 7 |U) = \{fili + 7 pli{Pm+ p\i) + 7 Pwpli + 1 ■ GpooPoiPioPn) 

I 



By symmetry we may assume p lies along a line in the 
H direction (x = z,y = 0), or p w = poi = f , poo = ^jp, 
Pn = "Mp. The trace (probability of success) then turns 
out to be jTj(l + 14a; 4 ), and the normalized density matrix 
is 

_L fl + 7x 3 + 14x 4 + 8a; 7 a; 3 (7 + 8a; 4 ) \ 

2 + 28x 4 V x 3 (7 + 8x 4 ) 1 - 7.t 3 + 14x 4 - 8x 7 ) 

corresponding to x out = ~[+T^^- Plotting this func- 
tion shows a threshold at x = \. Fig. [3] shows a plot 
versus p = §(1 — v2x), and Fig. 0] plots the efficiency. 
This proves Theorem ^ Note that in the small p limit, 
Pout ~ \v (versus 35p 3 for the procedures of Knill, and 
Bravyi and Kitaev), so convergence is only polynomially 
fast in the number of copies of p used. When the error 
probability is sufficiently small, switching to the 15-qubit 
code gives an exponential gain in efficiency. 



III. GOLAY [[23, 1,7]] CODE 

The computations we performed above can be carried 
out for any CSS code for which the logical X and Z 
operations are simply transverse X and Z, respectively. 
The terms that appear are of the form 

E < a i^» or E < a i^"i & > . 



TABLE I: The number of codewords of any given weight for 
the classical [23, 12, 7] Golay code. All 2 12 codewords are 
accounted for. 



Weight 


# codewords 


0, 23 


1 


8, 15 


506 


12,11 


1288 


16, 7 


253 



where S^ k \ are sets of classical codewords (satisfy- 
ing the Z parity checks) of weights k and I, respectively. 
Evaluating the first term requires knowing the weight 
distribution of the classical code corresponding to the Z 
stabilizers. Table [I] gives this distribution for the classi- 
cal [23, 12, 7] Golay code. Evaluating the second term re- 
quires knowing the distribution of the Hamming weights 
of the exor a © b as a and b vary over all codewords of 
weights k and I. Table [H] gives this distribution for the 
Golay code. 

To use these tables, note for example that 
(0i|p® a3 |0 L ) = 2ol8E fe , !e{ o,8,i2,i6}(fc|P® 23 IO, where \k) 
represents the unnormalized sum over all codewords of 
weight k. Using the second table we can read off 

(8|/^ 23 |12) = U1680p 9 00 p 6 01 p 2 10 p 6 n 

+ 425040/4^/4^ + 85008/MpV?! . 

Here, e.g., the first term comes a © b having weight 8; it 
is a degree 23 polynomial in entries of p. for which the 
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FIG. 3: The final error probability p ou t as a function of the 
initial error probability p for the H-type distillation. The dot- 
ted curve shows the effectiveness of the distillation procedures 
of Knill, and Bravyi and Kitaev. The dashed curve is for the 
Golay code, and the solid curve for the Steane code. Below, 
we plot p ou t — p for p beneath the threshold of |(1 — l/y/2). 
Notice that \H) itself is only an unstable fixed point for the 
Golay code distillation procedure, and there is a stable inter- 
mediate fixed point. 
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FIG. 4: The decoding acceptance probability as a function of 
the initial error probability p for the H-type distillation. The 
dotted curve is for the distillation procedure of Bravyi and 
Kitaev; the dashed curve is for the Golay code; and the solid 
curve for the Steane code. The new methods do not work 
as well for low values of p. Using the Golay code is always 
inferior to using the Steane code. 



TABLE II: Varying a over all Golay codewords of weight k, 
and b over all codewords of weight I, the k,l entry of this table 
gives the number of times a © & has Hamming weight 0, 8, 12 
or 16, in that order. Only positive, even entries for k and I are 
shown; zero- weight entries can be determined from Table [i] 
and odd-weight entries can be determined since every odd- 
weight codeword is the bitwise complement of an even- weight 
codeword. 
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12 


16 




506 








8 


106260 


141680 


7590 




141680 


425040 


85008 




7590 


85008 


35420 






1288 





12 




425040 


85008 






1020096 


212520 






212520 


28336 








253 


16 






35420 








28336 












exponents of pw and pw sum to \a\ = 8, the exponents 
of poi and p\\ sum to |6| = 12, and the exponents of poi 
and pio sum to \a ® b\ = 8. 

Since each odd-weight codeword is the bitwise com- 
plement of an even-weight codeword, having computed 
(0 L |p® 23 |0 L ), (0 L |p® 23 |l L ) can be obtained by just flip- 
ping the second subscripts, taking each occurrence of pij 
to Pi,i-j- To compute (1l|p® 23 |1l)> hip both subscripts. 

Now substituting for p lying on a line in the H di- 
rection, we obtain with some algebra that the decod- 
ing acceptance probability is (1 + 1012a; 8 + 2576a; 12 + 
8096a; 16 )/2 22 , and the conditional density matrix has 

_ x 7 (253 + 1288a; 4 + 8096a; 8 + 2048a; 16 ) 
Xout ~ 1 + 1012a; 8 + 2576a; 12 + 8096a; 16 

Fig. |21 plots the final error probability as a function of 
the error p. As for the Steane code, there is an unstable 
fixed point at x = z = i. Unlike for previous distillation 
procedures a; = z = is also only an unstable fixed 
point, and there is an additional stable fixed point at 
x — z w 0.62292. Fig.0]shows the acceptance probability 
Tr(|0 L )(0 L | + IUXIlDp® 23 . Decoding using the Golay 
code is always inferior to using the Steane code. 

In Appendix lAl we show that any CSS code encoding 
a single qubit for which logical X and Z operations are 
simply transverse X and Z has a fixed point at the cen- 
ter of each edge of the octahedron O. We determine a 
condition on the code for this fixed point to be stable in 
the H direction. 
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IV. CONCLUSION 

We have shown that the 7-bit Steane code pushes the 
error threshold for errors up to a tight value of around 
|(1 -lyS/2) « 14.64%. While the calculation is straight- 
forward, it is not entirely satisfying; we do not have a 
good understanding of why this distillation procedure 
works so well. What properties of the Steane code and 
the 5-qubit code allow for good distillation in the respec- 
tive H and T directions? 

It is a very interesting open question whether also the 



threshold in the T direction is tight to the face of the 
octahedron O. We considered dozens of small codes to 
try to improve the T-type distillation error threshold, 
but none could match the 5-qubit code's 17.27% error 
threshold. The Golay code gave a threshold of 16.12%, 
and quite a few codes have a 14.13% error threshold, in- 
cluding the simple 2-qubit code stabilized by ZZ (start- 
ing with a state along the T axis it distills a state in the 
xz plane for which the Steane code iJ-type distillation 
applies). If the threshold does not meet the face of O, 
then what is the power of the intermediate region? 
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APPENDIX A: MORE GENERAL CSS CODES 

Here we consider a general n-qubit CSS code encoding 
a single qubit, where the logical X and Z operations are 
simply transverse X and Z. What is the condition for 
if- type distillation to succeed for fidelities above F^l 

In the Bloch sphere, (x, y, z) = (h, 0, ^) is a fixed point 
exactly when 

(0 L |(p® n - x LP ® n x L + X LP ® n + p® n X L )\Q L ) 

= (0 L \(p + X L p® n X L )\0 L ) , 

or equivalents when (Q L \(2X L p® n X L - p® n X L - 

X L p® n )\0 L ) = 0. For a,b e S the set of even weight 
classical codewords satisfying the Z parity checks, let 
c = a © b. Then for p having Bloch sphere coordinates 

(x,0,x), 



Substituting x = § to get ^3™" 2 (M+H+I c l) ; ma king 
the condition for (x,y, z) = (^,0, i) to be a fixed point 
just 



2 .3i(M+l b H c l)_35(l a H b l+l c l)_35(-M+l b M c l) 1 _ 

a.beS 

This is always satisfied by symmetry. So (i,0, |) is al- 
ways a fixed point. 

The point (±,0,1) is an unstable fixed point if 

d u . ? 
dx 2v x =2 

where u = {i) L \{p® n - X L p® n X L + X L p® n + p® n X L ) \0 L ) 
and v = {Q L \{p® n + X L p® n X L )\0 L ). Equivalently, we ask 
if 

v! - v' - 2v > . 

With a little algebra using £(a\p® n \b) = |(n - 2(|a| + 
|b| — 2|c|))(a|p' 8ln |6) at x = |, this condition becomes the 
rather opaque inequality 



E 

a,beS 



{An - 1 - 2(|a| + |b| + 2|cQ) 32(l a l+l 6 l-l c D 
_ 3 „-I(|a|+|6|+|c|) 



> 



{a\p 



|^ = J_( 1+a .)'i-5(k| + |6| + |c|) ( - 1 _^i(|a| + |6|-| C |) a ,| c | 

2" 



APPENDIX B: PROOF OF COROLLARY |U 

Let |^) be the n-qubit pure state we can prepare which 
is not a stabilizer state, n > 1. We will show that there 
exists a sequence of n — 1 commuting stabilizer measure- 
ments with postselected outcomes of positive probability 
so that the resulting state is not a stabilizer state. (Clif- 
ford group operations can then move the resulting state 
into a single qubit, for which Corollary ^ applies.) The 
proof is by induction on n the number of qubits of |^>). 

Assume otherwise. Notice that no postselected stabi- 
lizer measurement on can succeed with probability 1, 
or else we could move that stabilizer into the last qubit, 
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leaving an n — 1 qubit pure state which is not a stabilizer 
state. Thus 

M=a|0>hto>+/?|l>hfc) . 

with a, /3 7^ 0. Both \tpo) and \ipi) must be stabilizer 
states, or we could apply the inductive assumption. Use 
Clifford group operations on bits 2, . . . , n to change the 
stabilizers of \ipo) into {Z.j}™ =2 with all +1 eigenvalues; 
i.e. assume w.l.o.g. |-0o) = |0' l_1 ). One of the Pauli 
products stabilizing must have an X or Y in some 
position - without loss on qubit 2. Swap X «-> Y on 
qubit 2 if necessary, then use controlled-Pauli operations 
from qubit two to move this stabilizer into just X2 (this 
will not affect \i[>o) because its in position 2 will not 
trigger the control). By applying Z2 if necessary, we may 
assume is a +1 cigenstate of X2. Repeating the same 
argument gives that has stabilizers {Xi}^ =2 with all 
+1 eigenvalues. Thus 

=a|000...0) +P\0 + + ...+) , 



where |+) = -^(|0) + |1)) the +1 cigenstate of X. Mea- 
suring qubits 2, 3, ... ,71 in the Z eigenbasis, postselecting 
on +1 outcome, leaves the unnormalized state 

«|0> + ^rli) , 

while measuring qubits 2, 3,...,n in the X eigenbasis, 
postselecting on +1 outcome, leaves 

-£rlo> + /3|i) ■ 
2 2 

Since a,/3^0, these can't both be stabilizer states. Thus 
in contradiction to our assumption, we have after all man- 
aged to reduce the state down to a single qubit pure state 
which is not a Pauli cigenstate. □ 



